Hello guys, my first post here. I found this in many variations, yet nothing to help me. Would really appreciate a push into the right direction. I kind of know my way around basics, but iptables are a bit too much sometimes 🙁 I set things up mainly using
this tutorial.
My intended setup is that the server provides its Internet connection to the client (acting as proxy ??? would use SOCKS if I could), yet no Internet connection in the client (tested on Windows 10 and Android 6.1). Connection appears to be working, yet no Internet connection possible. This is not a DNS misconfig - I can't even ping anything outside. See
C:\>ping 8.8.8.8
Pinging 8.8.8.8 with 32 bytes of data:
Reply from 10.8.0.1: Destination host unreachable.
C:\>ipconfig
Windows IP Configuration
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
IPv4 Address. . . . . . . . . . . : 192.168.0.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
Ethernet adapter Ethernet 4:
Connection-specific DNS Suffix . :
IPv4 Address. . . . . . . . . . . : 10.8.0.6
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Default Gateway . . . . . . . . . :
Wireless LAN adapter Wi-Fi:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
[other adapters removed]
All addresses appear to be fine (including DNS), except there's missing gateway address. Setting everything manually doesn't help.
Server config:
# rpm --query centos-release
centos-release-6-7.el6.centos.12.3.x86_64
# cat /etc/centos-release
CentOS release 6.7 (Final)
# openvpn --version
OpenVPN 2.3.12 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Aug 23 2016
library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_pthread=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=yes with_crypto_library=openssl with_gnu_ld=yes with_iproute_path=/sbin/ip with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_sysroot=no
# iptables-save
# Generated by iptables-save v1.4.7 on Mon Nov 14 01:40:36 2016
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [31627:25376481]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 20 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport [random open port range, including the openvpn port number] --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p udp -m udp --dport [my openvpn port] -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Mon Nov 14 01:40:36 2016
# Generated by iptables-save v1.4.7 on Mon Nov 14 01:40:36 2016
*nat
:PREROUTING ACCEPT [4928:604354]
:POSTROUTING ACCEPT [103:6269]
:OUTPUT ACCEPT [103:6269]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Mon Nov 14 01:40:36 2016
/etc/openvpn/server.confport [my openvpn port]
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 3
/etc/sysctl.conf (yes I did sysctl -p, also rebooted since)
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.
# Controls IP packet forwarding
net.ipv4.ip_forward = 1
# Controls source route verification
net.ipv4.conf.default.rp_filter = 1
# Do not accept source routing
net.ipv4.conf.default.accept_source_route = 0
# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0
# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1
# Controls the use of TCP syncookies
net.ipv4.tcp_syncookies = 1
# Disable netfilter on bridges.
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
# Controls the maximum size of a message, in bytes
kernel.msgmnb = 65536
# Controls the default maxmimum size of a mesage queue
kernel.msgmax = 65536
# Controls the maximum shared segment size, in bytes
kernel.shmmax = 68719476736
# Controls the maximum number of shared memory segments, in pages
kernel.shmall = 4294967296
# disable ipv6
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
Client config:
client
dev tun
proto udp
remote [my openvpn server ip] [my openvpn port]
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
-----BEGIN CERTIFICATE-----
[my ca certificate]
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
[my client certificate]
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
[my private key]
-----END PRIVATE KEY-----
</key>
My server logs when connected:
/etc/openvpn/openvpn-status.log
OpenVPN CLIENT LIST
Updated,Mon Nov 14 01:53:59 2016
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
client,[my net provider's public IP]:46153,15163,12494,Mon Nov 14 01:52:44 2016
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.6,client,[my net provider's public IP]:46153,Mon Nov 14 01:53:58 2016
GLOBAL STATS
Max bcast/mcast queue length,0
END
/etc/openvpn/openvpn.log (actually three consecutive connections, wasn't sure whether to clip or not)
Mon Nov 14 01:22:26 2016 OpenVPN 2.3.12 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Aug 23 2016
Mon Nov 14 01:22:26 2016 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
Mon Nov 14 01:22:26 2016 Diffie-Hellman initialized with 2048 bit key
Mon Nov 14 01:22:26 2016 Socket Buffers: R=[124928->124928] S=[124928->124928]
Mon Nov 14 01:22:26 2016 ROUTE_GATEWAY [server's gw]/255.255.255.0 IFACE=eth0 HWADDR=[mac address]
Mon Nov 14 01:22:26 2016 TUN/TAP device tun0 opened
Mon Nov 14 01:22:26 2016 TUN/TAP TX queue length set to 100
Mon Nov 14 01:22:26 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 14 01:22:26 2016 /sbin/ip link set dev tun0 up mtu 1500
Mon Nov 14 01:22:26 2016 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Nov 14 01:22:26 2016 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Nov 14 01:22:26 2016 GID set to nobody
Mon Nov 14 01:22:26 2016 UID set to nobody
Mon Nov 14 01:22:26 2016 UDPv4 link local (bound): [undef]
Mon Nov 14 01:22:26 2016 UDPv4 link remote: [undef]
Mon Nov 14 01:22:26 2016 MULTI: multi_init called, r=256 v=256
Mon Nov 14 01:22:26 2016 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Nov 14 01:22:26 2016 ifconfig_pool_read(), in='client,10.8.0.4', TODO: IPv6
Mon Nov 14 01:22:26 2016 succeeded -> ifconfig_pool_set()
Mon Nov 14 01:22:26 2016 IFCONFIG POOL LIST
Mon Nov 14 01:22:26 2016 client,10.8.0.4
Mon Nov 14 01:22:26 2016 Initialization Sequence Completed
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 TLS: Initial packet from [AF_INET][my net provider's public IP]:46479, sid=4c67f628 867a8b0c
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 VERIFY OK: depth=1, C=[country], L=[city], O=[org], OU=server, CN=[domain], name=server
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 VERIFY OK: depth=0, C=[country], L=[city], O=[org], OU=server, CN=client, name=server
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Nov 14 01:22:38 2016 [my net provider's public IP]:46479 [client] Peer Connection Initiated with [AF_INET][my net provider's public IP]:46479
Mon Nov 14 01:22:38 2016 client/[my net provider's public IP]:46479 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Nov 14 01:22:38 2016 client/[my net provider's public IP]:46479 MULTI: Learn: 10.8.0.6 -> client/[my net provider's public IP]:46479
Mon Nov 14 01:22:38 2016 client/[my net provider's public IP]:46479 MULTI: primary virtual IP for client/[my net provider's public IP]:46479: 10.8.0.6
Mon Nov 14 01:22:40 2016 client/[my net provider's public IP]:46479 PUSH: Received control message: 'PUSH_REQUEST'
Mon Nov 14 01:22:40 2016 client/[my net provider's public IP]:46479 send_push_reply(): safe_cap=940
Mon Nov 14 01:22:40 2016 client/[my net provider's public IP]:46479 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Nov 14 01:28:16 2016 client/[my net provider's public IP]:46479 [client] Inactivity timeout (--ping-restart), restarting
Mon Nov 14 01:28:16 2016 client/[my net provider's public IP]:46479 SIGUSR1[soft,ping-restart] received, client-instance restarting
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 TLS: Initial packet from [AF_INET][my net provider's public IP]:46320, sid=951750dc 8e3dbff3
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 VERIFY OK: depth=1, C=[country], L=[city], O=[org], OU=server, CN=[domain], name=server
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 VERIFY OK: depth=0, C=[country], L=[city], O=[org], OU=server, CN=client, name=server
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Nov 14 01:30:44 2016 [my net provider's public IP]:46320 [client] Peer Connection Initiated with [AF_INET][my net provider's public IP]:46320
Mon Nov 14 01:30:44 2016 client/[my net provider's public IP]:46320 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Nov 14 01:30:44 2016 client/[my net provider's public IP]:46320 MULTI: Learn: 10.8.0.6 -> client/[my net provider's public IP]:46320
Mon Nov 14 01:30:44 2016 client/[my net provider's public IP]:46320 MULTI: primary virtual IP for client/[my net provider's public IP]:46320: 10.8.0.6
Mon Nov 14 01:30:46 2016 client/[my net provider's public IP]:46320 PUSH: Received control message: 'PUSH_REQUEST'
Mon Nov 14 01:30:46 2016 client/[my net provider's public IP]:46320 send_push_reply(): safe_cap=940
Mon Nov 14 01:30:46 2016 client/[my net provider's public IP]:46320 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Nov 14 01:37:18 2016 client/[my net provider's public IP]:46320 [client] Inactivity timeout (--ping-restart), restarting
Mon Nov 14 01:37:18 2016 client/[my net provider's public IP]:46320 SIGUSR1[soft,ping-restart] received, client-instance restarting
Mon Nov 14 01:52:44 2016 [my net provider's public IP]:46153 TLS: Initial packet from [AF_INET][my net provider's public IP]:46153, sid=f56bf70a 058dc55c
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 VERIFY OK: depth=1, C=[country], L=[city], O=[org], OU=server, CN=[domain], name=server
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 VERIFY OK: depth=0, C=[country], L=[city], O=[org], OU=server, CN=client, name=server
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Nov 14 01:52:45 2016 [my net provider's public IP]:46153 [client] Peer Connection Initiated with [AF_INET][my net provider's public IP]:46153
Mon Nov 14 01:52:45 2016 client/[my net provider's public IP]:46153 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Nov 14 01:52:45 2016 client/[my net provider's public IP]:46153 MULTI: Learn: 10.8.0.6 -> client/[my net provider's public IP]:46153
Mon Nov 14 01:52:45 2016 client/[my net provider's public IP]:46153 MULTI: primary virtual IP for client/[my net provider's public IP]:46153: 10.8.0.6
Mon Nov 14 01:52:47 2016 client/[my net provider's public IP]:46153 PUSH: Received control message: 'PUSH_REQUEST'
Mon Nov 14 01:52:47 2016 client/[my net provider's public IP]:46153 send_push_reply(): safe_cap=940
Mon Nov 14 01:52:47 2016 client/[my net provider's public IP]:46153 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
My client log when connected:
Mon Nov 14 01:52:43 2016 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 10 2016
Mon Nov 14 01:52:43 2016 Windows version 6.2 (Windows 8 or greater)
Mon Nov 14 01:52:43 2016 library versions: OpenSSL 1.0.1s 1 Mar 2016, LZO 2.09
Enter Management Password:
Mon Nov 14 01:52:43 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Mon Nov 14 01:52:43 2016 Need hold release from management interface, waiting...
Mon Nov 14 01:52:44 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Mon Nov 14 01:52:44 2016 MANAGEMENT: CMD 'state on'
Mon Nov 14 01:52:44 2016 MANAGEMENT: CMD 'log all on'
Mon Nov 14 01:52:44 2016 MANAGEMENT: CMD 'hold off'
Mon Nov 14 01:52:44 2016 MANAGEMENT: CMD 'hold release'
Mon Nov 14 01:52:44 2016 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Nov 14 01:52:44 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Nov 14 01:52:44 2016 UDPv4 link local: [undef]
Mon Nov 14 01:52:44 2016 UDPv4 link remote: [AF_INET][my server's IP]:[my openvpn port]
Mon Nov 14 01:52:44 2016 MANAGEMENT: >STATE:1479084764,WAIT,,,
Mon Nov 14 01:52:44 2016 MANAGEMENT: >STATE:1479084764,AUTH,,,
Mon Nov 14 01:52:44 2016 TLS: Initial packet from [AF_INET][my server's IP]:[my openvpn port], sid=8268dc5e fe273899
Mon Nov 14 01:52:44 2016 VERIFY OK: depth=1, C=[country], L=[city], O=[org], OU=server, CN=[domain], name=server
Mon Nov 14 01:52:44 2016 VERIFY OK: depth=0, C=[country], L=[city], O=[org], OU=server, CN=[domain], name=server
Mon Nov 14 01:52:44 2016 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:52:44 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:52:44 2016 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 14 01:52:44 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 14 01:52:44 2016 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Nov 14 01:52:44 2016 [na5piv.cz] Peer Connection Initiated with [AF_INET][my server's IP]:[my openvpn port]
Mon Nov 14 01:52:46 2016 MANAGEMENT: >STATE:1479084766,GET_CONFIG,,,
Mon Nov 14 01:52:47 2016 SENT CONTROL [na5piv.cz]: 'PUSH_REQUEST' (status=1)
Mon Nov 14 01:52:47 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon Nov 14 01:52:47 2016 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov 14 01:52:47 2016 OPTIONS IMPORT: --ifconfig/up options modified
Mon Nov 14 01:52:47 2016 OPTIONS IMPORT: route options modified
Mon Nov 14 01:52:47 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Nov 14 01:52:47 2016 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=6 HWADDR=00:1c:25:9f:93:42
Mon Nov 14 01:52:47 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 14 01:52:47 2016 MANAGEMENT: >STATE:1479084767,ASSIGN_IP,,10.8.0.6,
Mon Nov 14 01:52:47 2016 open_tun, tt->ipv6=0
Mon Nov 14 01:52:47 2016 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{EE39D11D-00B1-4EAA-AC8A-C98177D2572A}.tap
Mon Nov 14 01:52:47 2016 TAP-Windows Driver Version 9.21
Mon Nov 14 01:52:47 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {EE39D11D-00B1-4EAA-AC8A-C98177D2572A} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Nov 14 01:52:47 2016 Successful ARP Flush on interface [15] {EE39D11D-00B1-4EAA-AC8A-C98177D2572A}
Mon Nov 14 01:52:52 2016 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Mon Nov 14 01:52:52 2016 C:\WINDOWS\system32\route.exe ADD [my server's IP] MASK 255.255.255.255 192.168.0.1
Mon Nov 14 01:52:52 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Nov 14 01:52:52 2016 Route addition via IPAPI succeeded [adaptive]
Mon Nov 14 01:52:52 2016 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Mon Nov 14 01:52:52 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Nov 14 01:52:52 2016 Route addition via IPAPI succeeded [adaptive]
Mon Nov 14 01:52:52 2016 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Mon Nov 14 01:52:52 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Nov 14 01:52:52 2016 Route addition via IPAPI succeeded [adaptive]
Mon Nov 14 01:52:52 2016 MANAGEMENT: >STATE:1479084772,ADD_ROUTES,,,
Mon Nov 14 01:52:52 2016 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Nov 14 01:52:52 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Nov 14 01:52:52 2016 Route addition via IPAPI succeeded [adaptive]
Mon Nov 14 01:52:52 2016 Initialization Sequence Completed
Mon Nov 14 01:52:52 2016 MANAGEMENT: >STATE:1479084772,CONNECTED,SUCCESS,10.8.0.6,[my server's IP]
Hope that's all information needed, I tried to be exhaustive 😃 Thanks for any help!
This is my third attempt at making this work (on different systems and distros), I'm seriously on the verge of giving up and accepting I lost... The system is almost untouched, installed this summer from pre-prepared image by the VPS host (CentOS LAMP flavor). Nothing running there, just a sleeping project parked. I'm not completely sure on the host's infrastructure, but traffic shouldn't be filtered. Also nothing here points to anything but a wrong server config IMO.
Best Regards
